This paper analyzes the use of terrorist and violent extremist (TVE) operated websites and platforms on the Domain Name System (DNS), as part of a multi-platform approach within terrorist exploitation of the internet. In particular, this paper situates the resurgent exploitation of internet infrastructure within the context of improved content moderation by tech companies, and a growing trend of terrorist and violent extremist dispersion across more niche online platforms, where the audience reach of these actors is limited.
This paper considers how terrorist and violent extremist actors could respond to industry improvements in content removal policies on websites and self-operated platforms on the surface web, including potential migration to decentralized web hosting technologies and the dark web. It argues that counter-terrorism practitioners, researchers, governments, and the tech sector should pay more attention to terrorist and violent extremist operated websites and platforms, after several years of focusing on the exploitation of social media and messaging platforms used by the wider general public.